In the Claims : 

1. (Previously Presented) An asymmetrical key cryptography method 
involving a keyholder having a number m > 1 of private keys Q x ,Q 2 ^^Q m and respective public 
keys G 1? G 2v ..,G m , each pair of keys (g„G,) (where i = ) satisfying either the relationship 
G; = jg/ mod n or the relationship G, x g. v = 1 mod n , where is a public integer equal to the 
product of / (where / > 1) private prime factors p l9 ... 9 p f , at least two of which are separate, 

and the exponent v is a public integer equal to a power of 2, wherein the method comprises the 
steps of: 

arranging exponent v to have the relationship v = 2 b+k , 
where £ is a strictly positive integer and b = max^,,...,^), where b } (where j = 1,...,/) is the 

highest integer such that (j>j-l)/2 bj ~ l is even; [[,]] and 

arranging each public key G, (where / = l 9 ... 9 m ) to have the form G ; = g, 2 "' mod n , 
where the base numbers g i are integers strictly greater than 1 and the numbers a, are integers 
such that 1 < a, < b and at least one of them is strictly greater than 1 . 

2. (Previously Presented) A method according to claim 1 , wherein at least one 
of said prime factors p l9 ...,p f is congruent to 1 modulo 4 and the integers a t (where i = l 9 ... 9 m) 
are all equal to said number b . 



3. (Previously Presented) A method according to claim 1, wherein said base 
numbers g l9 ... 9 g m include at least one number g s and said prime factors p X9 ... 9 p f include at least 
two numbers p t and p u other than 2 such that, given said numbers b v ...,b f , 

if then (g s \p,) = - (g s \p u ), and 

if 6,<Z> w ,then (g s \p u ) = -U 
where (g s \ p t ) and (g s \ p u ) denote the Legendre symbols of g s relative to p t and p u . 

4. (Previously Presented) A method according to claim 1, wherein the base 
numbers g l9 ... 9 g m are prime numbers. 

5. (Previously Presented) A method according to claim 1, involving a 
controller and said keyholder, here called the claimant, wherein the method comprises the 
following steps: 

the claimant chooses at random an integer r , calculates the witness R = r v mod n and 
sends the witness to the controller, 

the controller chooses at random m challenges d ]9 d 29 ... 9 d m and sends the challenges to 
the claimant, 

the claimant calculates the response 

D = rxQ l d >xQ 2 d >x...xQ m d ™ mod*, 
and sends the response to the controller, and 

the controller calculates 



D v x G* A x G 2 ldl x ... x G m €md " mod n 

where, for / = l,...,m , s i = +1 if G, x 0 ; v = 1 mod n and = -1 if G, = 0/ mod n , 
and verifies that the result is equal to the witness R . 

6. (Currently Amended) A method according to claim 1, enabling a controller to 
verify that a message M that it has received was sent to it by said keyholder, here called the 
claimant, wherein the method comprises the following steps: 

the claimant chooses at random an integer r and first calculates the witness 
R = r v mod n , then calculates the token T = h(M,R), where h is a hashing function, and finally 
sends the token T to the controller, 

the controller chooses at random m challenges d x ,d 2 ,...,d m whore ; = l,..,,m , and sends 
the challenges to the claimant, 

the claimant calculates the response 
D = rxQ x dl x Q 2 dl x ... x Q dm mod n and sends the response to the controller, and 

the controller calculates h (m, D v x G* a x x ... x G m €mdm mod n) where, for 

/ = l,...,m, £, =+1 if G,x0, v =lmodrc and ^ =-1 if G, =g v mod n, and verifies that the 
result is equal to the token T . 

7. (Previously presented) A method according to claim 5, wherein the 
challenges satisfy the condition 0 < d i < 2 k - 1 for / = 1,..., aw . 



8. (Currently Amended) A method according to claim 1, enabling said keyholder, 
here called the signatory, to sign a message M that it sends to a controller, wherein the method 
comprises the following steps: 

the signatory chooses at random m integers r n where i = , and first calculates the 

witnesses A, =r,'modn R-r v mod n , then calculates the token T = h(M,R l9 R 2 ,...,R m ) , 

where h is a hashing function producing a word of m bits, and finally sends the token T to the 
controller, 

the signatory identifies the bits d x ,d 2 ,...,d m of the token 7\ 

the signatory calculates the responses D i = r y x Q d ' mod n and sends the responses to the 
controller, and 

the controller calculates 
h (m,D x v x G x eA mod n, D 2 V x G 2 €ldl mod x G m £ " d » mod w) 

where, for / = l,..,m, ^ = +1 if G, x Q" = 1 mod « and e t = -1 if G ; = Q* mod n , and verifies 
that the result is equal to the token T . 

9. (Currently Amended) An electronic circuit including a processor and memories, 
wherein the electronic circuit can b e is programmed to act as said keyholder in executing a 
method according to claim 1 . 
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10. (Previously Presented) A dedicated electronic circuit, including 
microcomponents enabling the electronic circuit to process data in such manner as to act as said 
keyholder in executing a method according to claim 1 . 

11. (Currently Amended) A portable object adapted to be connected to a terminal to 
exchange data with that terminal, wherein the portable object includes an electronic circuit 
according to claim 9 or claim 10 and is adapted to store identification data and private keys 
specific to said key holder. 

12. (Currently Amended) A terminal adapted to be connected to a portable object to 
exchange data with that portable object, wherein the terminal includes a data processing device 
programmed to act as said controller in executing a method according to claim 1 any one of 
claims 5-8 . 

13. (Currently Amended) A cryptography system comprising: 

a portable object adapted to be connected to a terminal to exchange data with that 
terminal, wherein the portable object includes an electronic circuit having a proc e ssor and 
m e mories , 

wherein the electronic circuit can be is_programmed to act as said keyholder in executing 
a m e thod according to claim 1 an asymmetrical key cryptography method involving a keyholder 
having a number mjA of private kevs Q X ,Q 2 O m and respective public kevs G X .G Z G m 3 

each pair of keys ( Q , G i ) (where / = l,...,m ) satisfying either the relationship G i =Q" mod w_or 



the relationship G i x Q. v = 1 mod n 3 where n_ is a public integer equal to the product of f (where 

/ > 1 ) private prime factors p } p f , at least two of which are separate, and the exponent v is a 

public integer equal to a power of 2. wherein the method comprises the steps of: 

arranging exponent v to have the relationship v = 2 b+k a 
where ^ is a strictly pos itive integer and b = max(b } b f ) . where bj (where y = 1 f ) is the 

highest integer such that (/? y - 1) / 2* 7 _1 is even: fLU and 

arranging each public key G, (where i = 1 m) to have the form 

G^gf mod« A 

where the base numbers g, are integers strictly greater than 1 and the numbers a, are integers 
such that 1 <a t <b and at least one of them is strictly greater than L 

and wherein the portable object is adapted to store identification data and private keys 
specific to said key holder; and 

a terminal adapted to be connected to the portable object to exchange data with that 
portable object, wherein the terminal includes a data processing device programmed to act as 
said controller in executing a method according to [claim 1] any one of claims 5-8 . 

14. (Currently Amended) Non-removable data storage means containing electronic 
data processing program code instructions for, as said keyholder, executing the steps of any of 
th e m e thods of a method according to claim 1 . 
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15. (Previously Presented) Partially or totally removable storage means 
containing electronic data processing program code instructions for, as said keyholder, executing 
the steps of a method according to claim 1 . 

16. (Currently Amended) A data processing device comprising storage means 
according to claim 14 or claim 15 . 

17. (Currently Amended) Non-removable data storage means containing electronic 
data processing program code instructions for, as said controller, executing the steps of any of 
th e m e thods of a method according to claim 1 any one of claims 5-8 . 

18. (Currently Amended) Partially or totally removable data storage means 
containing electronic data processing program code instructions for, as said controller, executing 
the steps of a method according to claim 1 any one of claims 5-8 . 

19. (Currently Amended) A data processing device, wherein it comprises storage 
means according to claim 17 or claim 18 . 

20. (Currently Amended) A cryptography system comprising: 

a data processing device including non r e movable storage means containing 
electronic data processing program code instructions for, as said keyholder, executing the steps 
of any of the methods of a m e thod according to claim 1 an asymmetrical key cryptography 
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method involving a kevholder having a number m>\ of private keys Q x , Q 2 v .., g m and 

respective public keys G P G, G ni . each pair of kevs (Q..G/> (where ; = 1 satisfying 

either the relationship G, = Q, v mod n or the relationship G, x Q. v = 1 mod n a where ft is a public 
integer equ al to the product of / (where / > 1 ) private prime factors p x p f a at least two of 

which are separate, and the exponent is a public integer equal to a power of 2. wherein the 
method comprises the steps of: 

arranging exponent v to have the relationship v = 2 b * k a 
where is a strictly positive integer and b = max(b x b f ) , where (where / = 1 f ) is the 

highest integer such that (pj - 1) / 2* y " l is even: f f,11 and 

arranging each public key G f (where i = 1 m ) to have the form 

G y =g ; 2 ' modn> 

where the base numbers g, are integers strictly greater than 1 and the numbers a, are integers 

such that 1 <a t <b and at least one of them is strictly greater than 1 ; and 

a data processing device including non r e movable data storage means containing 
electronic data processing program code instructions for, as said controller, executing the steps 
of any of th e m e thods of a method according to claim 1 any one of claims 5-8 , 
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21. (Previously Presented) A computer program containing instructions such that, 
when said program controls a programmable data processing device, said instructions cause said 
data processing device to execute a method according to claim 1. 

22. (Previously Presented) A method according to claim 4, wherein the base numbers 
g, g m are chosen from the first 54 prime numbers. 
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